[Bug 1206712] New: CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

List overview All Threads
Download

newer

older

[Bug 1206714] New: CVE-2015-2774...

[Bug 1206713] New: CVE-2015-2774...

Red Hat Bugzilla

27 Mar 2015 27 Mar '15

3:31 p.m.

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

Bug ID: 1206712 Summary: CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation Product: Security Response Component: vulnerability Keywords: Security Severity: high Priority: high Assignee: security-response-team@redhat.com Reporter: fleite@redhat.com CC: erlang@lists.fedoraproject.org, gemi@bluewin.ch, lemenkov@gmail.com, rhbugs@n-dimensional.de, rjones@redhat.com, s@shk.io

It was reported upstream that Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation. This vulnerability was assigned CVE-2015-2774.

References: http://www.erlang.org/news/85 http://openwall.com/lists/oss-security/2015/03/27/9

-- You are receiving this mail because: You are on the CC list for the bug.

Show replies by date

Red Hat Bugzilla

27 Mar 27 Mar

3:32 p.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

Fabio Olive Leite fleite@redhat.com changed:

--- Comment #1 from Fabio Olive Leite fleite@redhat.com ---

Created erlang tracking bugs for this issue:

Affects: fedora-all [bug 1206713] Affects: epel-all [bug 1206714]

Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1206713 [Bug 1206713] CVE-2015-2774 erlang: Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1206714 [Bug 1206714] CVE-2015-2774 erlang: Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation [epel-all]

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

3:55 p.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

Richard W.M. Jones rjones@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |jeckersb@redhat.com

--- Comment #2 from Richard W.M. Jones rjones@redhat.com --- Adding Rabbit maintainer just FYI.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

18 Aug 18 Aug

12:26 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712 Bug 1206712 depends on bug 1206713, which changed state.

Bug 1206713 Summary: CVE-2015-2774 erlang: Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1206713

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

12:26 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

--- Comment #3 from Fedora Update System updates@fedoraproject.org --- erlang-17.4-4.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

12:26 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

--- Comment #4 from Fedora Update System updates@fedoraproject.org --- erlang-17.4-4.fc21 has been pushed to the Fedora 21 stable repository. If problems still persist, please make note of it in this bug report.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

22 Aug 22 Aug

11:26 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

Fedora Update System updates@fedoraproject.org changed:

What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |ON_QA

--- Comment #5 from Fedora Update System updates@fedoraproject.org --- erlang-17.4-5.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.\nIf you want to test the update, you can install it with \n su -c 'yum --enablerepo=updates-testing update erlang'. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/erlang-17.4-5.fc23

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

11:26 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712 Bug 1206712 depends on bug 1206713, which changed state.

Bug 1206713 Summary: CVE-2015-2774 erlang: Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1206713

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

26 Aug 26 Aug

2:12 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

Tomas Hoger thoger@redhat.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Status|ON_QA |NEW

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

1 Sep 1 Sep

1:32 p.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

--- Comment #6 from Fedora Update System updates@fedoraproject.org --- erlang-17.4-5.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

1:32 p.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712 Bug 1206712 depends on bug 1206713, which changed state.

Bug 1206713 Summary: CVE-2015-2774 erlang: Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1206713

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

2 Sep 2 Sep

12:55 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712

--- Comment #7 from Fedora Update System updates@fedoraproject.org --- erlang-R16B-03.11.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.

-- You are receiving this mail because: You are on the CC list for the bug.

Red Hat Bugzilla

12:55 a.m.

New subject: [Bug 1206712] CVE-2015-2774 Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation

https://bugzilla.redhat.com/show_bug.cgi?id=1206712 Bug 1206712 depends on bug 1206714, which changed state.

Bug 1206714 Summary: CVE-2015-2774 erlang: Erlang/OTP is vulnerable to Poodle in its TLS-1.0 implementation [epel-all] https://bugzilla.redhat.com/show_bug.cgi?id=1206714

-- You are receiving this mail because: You are on the CC list for the bug.

3842

Age (days ago)

4001

Last active (days ago)

erlang@lists.fedoraproject.org

12 comments

1 participants

tags (0)

participants (1)

Red Hat Bugzilla